PT-2022-12194
CVE-2021-44652
·
تاريخ النشر
2022-01-12
·
تاريخ التحديث
2022-01-25
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Zoho ManageEngine O365 Manager Plus versions prior to Build 4416
Description
The issue allows remote code execution via BCP file overwrite through the ChangeDBAPI component.
Recommendations
For versions prior to Build 4416, update to Build 4416 or later to resolve the issue. As a temporary workaround, consider restricting access to the ChangeDBAPI component to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾